My Requirement is simple :

1. VLAN20 is my private network, its connected to another device in my home. I need my SSID1 on CPE220 limited to only Whitelist devices via Mac Filtering.

2. VLAN30 is my public network for sharing with another family,   but they have to login with Mikrotik Hotspot if they need internet. They don't have to Whitelisted, so i need disable Mac filtering on SSID2.

3. Because sometime they playing online games and forget time to rest, i need Scheduling to disable SSID2 on certain time. For example at 23:00 - 06:00, several TP-Link indoor router have this option and very usefull for me.

I you need more information, let me know it. Thanks

@Dhelazt 

This my expanded version of network, i need to set SSID1 using Mac Filtering because only my family can connect to it using their Outdoor APs ( Their home > 100m ). Meanwhile, other people can connect to SSID2 using their devices without tell me if they want to connect, they only need to pay vouchers from me. About parental control & scheduling, i found another solution, so i only need ability enable/disable Mac Filtering for each SSID. 

Thanks

@Fae this my CPE220

I have 2 SSIDs, i need to enable Mac Filtering on SSID1 to allow only registered devices to connect. While disable Mac Filtering completely on SSID2 and allow all devices connect. Current Pharos firmware not support it, if Mac Filtering enabled all SSID will refuse unregistered devices to connect.